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Top Stories 

• A Russian man extradited overseas pleaded guilty in an Atlanta court to developing, 
selling, and customizing the SpyEye banking trojan that infected more than 1.4 million 
computers in order to steal millions of dollars. - Wired.com (See item 2) 

• Bainbridge Island, Washington officials estimated that 145,000 gallons of raw sewage 
spilled into Eagle Harbor January 23 due to a sewer pipe break. - Bainbridge Island 
Review (See item 10 ) 

• Healthcare providers are asking hospitals, dialysis centers, and doctors to use smaller IV 
bags of intravenous saline and find alternatives to cope with a nationwide shortage. - 
Washington Post (See item 14 ) 

• Southern U.S. States were hit by a severe winter storm January 28 that prompted the 
closure of dozens of schools, students remaining sheltered overnight in schools, hours-long 
traffic gridlock, and the cancellation of more than 3,200 flights nationwide. - Associated 
Press (See item 20) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

1. January 28, Baltimore Sun - (Maryland) Tool containing radioactive material stolen 
Monday in Baltimore. The Maryland Department of the Environment stated January 
27 that a device containing a small amount of radioactive material used to measure lead 
in paint was stolen in Baltimore and requested the public’s help in recovering it. 

Source: http://www.bahimoresun.com/news/maryland/bs-md-radioactive-tool-stolen- 
20140128.0.1 1085Q8.storv 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

2. January 28, Wired.com - (International) Coder behind notorious bank-hacking tool 
pleads guilty. A Russian man extradited from the Dominican Republic pleaded guilty 
in an Atlanta court to developing, selling, and customizing the SpyEye banking trojan 
that infected more than 1 .4 million computers. The trojan was sold to over 150 
customers worldwide who used it to compromise thousands of bank accounts and steal 
millions of dollars. 

Source: http://www.wired.com/threatlevel/2014/01/spv-eve-author-guilty-plea/ 

3. January 28, USA Today - (National) BBB warns of scam charging $9.84 to credit 
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cards. The Better Business Bureau warned consumers of a payment card fraud scheme 
that has been making $9.84 charges to consumers’ cards in the name of a generic 
customer support Web site. 

Source: http://www.clarionledger.com/article/20140128/BIZ/140128Q16/BBB-warns- 
scam-charging-9- 84-credit-cards 

4. January 28, Los Angeles Times - (California) ‘Ho-hum bandit’ pleads guilty to seven 
more bank robberies. A man known as the “Ho-Hum Bandit” pleaded guilty January 
28 to robbing seven banks in the San Diego area from February to June 2010. The man 
had previously been convicted of four bank robberies in Denver, Colorado, and 
Cheyenne, Wyoming. 

Source: http://www.latimes.com/local/lanow/la-me-ln--ho-hum- 
20140128,0,268882.story 

For another story, see item 26 
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Transportation Systems Sector 

5. January 29, Pensacola News Journal - (Florida) CSX train derailment in McDavid. 
Multiple train cars from a CSX train derailed and fell into Fletcher Creek in Escambia 
County January 28, causing residents of 12 homes to be evacuated as a precaution. No 
evidence of leaking chemicals was found and authorities determined repairs could take 
several weeks. 

Source: http ://w w w .pnj . com/article/20 1401 29/NEWSO 1/14012801 9/Train-derailment- 
in-Molino 

6. January 29, Eugene Register-Guard - (Oregon) A truck overturns at freeway exit, 
killing driver. A semi-truck overturned as it exited Interstate 5 in Cottage Grove, 
Oregon, January 28, killing the driver of the vehicle and causing the southbound 
freeway exit to be closed for over 6 hours. 

Source: http://www.registerguard.com/rg/news/local/31064281-75/crash-exit-cottage- 
grove-closed.html.csp 

7. January 29, Marietta Times - (Ohio) Towboat stuck in river ice. A towboat carrying 
15 loads of coal on the Ohio River was stranded for several hours January 28 for a 
second time in at least 1-inch thick river ice near New Matamoras. The U.S. Coast 
Guard was dispatched to help free the vessel. 

Source: http://www.newsandsentinel.com/page/content.detail/id/582783/Towboat- 
stuck-in-river-ice.html?nav=5061 

For another story, see item 20 
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Food and Agriculture Sector 



8. January 29, Southern Maryland Newspapers - (Maryland) Charlotte Hall store fire 
loss set at $1 million. A Charlotte Hall, Maryland farming cooperative, Southern 
States, suffered an estimated $1 million in damages to its showroom from a fire that 
broke out after an electrical malfunction in the showroom’s attic January 28. 

Source: 

http://www.somdnews.com/article/20140129/NEWS/140129157/1056/charlotte-hall- 
store-fire-loss-set-at- 1 -million&template=southernMaryland 
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Water and Wastewater Systems Sector 

9. January 29, KWES 9 Midland/Odessa - (Texas) Water main break in Big Spring 
leaves over half the city with no water, city issues boil water notice. A busted water 
main January 28 caused around 2 million gallons of water to be lost in Big Spring, 
Texas, leaving many residents with low water pressure. Residents were advised to boil 
any water used for consumption until further notice. 

Source: http://www.newswest9.com/storv/24569859/water-main-break-in-big-spring- 
leaves-over-half-the-city-with-no-water-city-issues-boil-water-notice 

10. January 28, Bainbridge Island Review - (Washington) Broken sewer pipe spills 145K 
gallons of raw sewage into Eagle Harbor. Bainbridge Island officials estimated that 
145,000 gallons of raw sewage spilled into Eagle Harbor January 23 due to a sewer 
pipe break. Crews stopped flow through the pipeline and set up a temporary bypass. 
Source: http ://www .bainbridgereview . com/new s/24245 9141 .html 

11. January 27, Beaufort County Island Packet - (South Carolina) Bluffton sewage spill 
won’t reach May River, officials say. About 6,500 gallons of raw sewage leaked from 
a 12-inch pressurized sewer main in Bluffton January 26. Crews contained the spill 
before it reached the May River and pumped out nearly 12,000 gallons of sewage and 
water out of the storm drain and nearby area while fecal coliform levels were tested at 
various sites. 

Source: http://www.islandpacket.com/2014/01/27/2914964/6500-gallons-of-sewage- 
spills.html 

12. January 27, Associated Press - (Iowa) 46,000 gallons of sewage released in Rockwell 
City. Around 46,000 gallons of sewage sludge was released January 25 from a water 
treatment plant in Rockwell City after an employee forgot to shut off a sludge pump 
while attempting to fix a broken water main. Workers stopped the sludge’s flow 
towards Lake Creek and removed it, though a small amount was found on ice covering 
the creek. 

Source: http://www.ktiv.eom/story/24558671/46000-gallons-of-sewage-released-in- 
rockwell-city 
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Healthcare and Public Health Sector 



13. January 29, Park Hills Daily Journal - (Missouri) Senior center reopens following 
fire. The Bonne Terre Senior Center in Missouri reopened January 29 after a fire 
destroyed a food storage area January 28 and forced the center to temporarily close. 
Authorities are investigating the cause of the fire that left the detached building a total 
loss. 

Source: http://dailvioumalonline.com/bonneterre/news/senior-center-reopens- 
following-fire/article 127878b4-8826-l Ie3-bb76-001a4bcf887a.html 

14. January 28, Washington Post - (National) Shortage of saline causes hospitals, 
dialysis centers to scramble to manage supply. Healthcare providers are asking 
hospitals, dialysis centers, and doctors to use smaller IV bags of intravenous saline and 
find alternatives to cope with a nationwide shortage. The U.S. Food and Drug 
Administration is working with three manufacturers of intravenous saline solutions to 
address the shortage, and is looking into alternative sources. 

Source: http://www.washingtonpost.com/national/health-science/shortage-of-saline- 
causing-hospitals-dialsysis-centers-to-scramble-to-manage- 
supply/2014/01/28/9cfe2b8c-8862-lle3-833c-33098f9e5267 story.html 

15. January 28, Oklahoma City Oklahoman - (Oklahoma) Six hospitalized after fire at 
Oklahoma City nursing home. A fire at the South Park Health Care Center in 
Oklahoma City January 28 left six staff member hospitalized after helping residents 
evacuate while the building’s sprinkler system put out the fire. 

Source: http://newsok.com/six-hospitalized-after-fire-at-oklahorna-city-nursing- 
home/article/3928 108 

16. January 28, KAMR 4 Amarillo - (Texas) Dozens of seniors evacuated from burning 
nursing home. Residents from King’s Manor Retirement Facilities in Hereford, Texas, 
were sent to other area facilities after a fire in the kitchen caused an evacuation of 61 
residents and staff members January 27. The nursing home may remain closed until 
February 1. 

Source: http://www.mvhighplains.com/storv/d/storv/dozens-of-seniors-evacuated-from- 
buming-nursing-h/29273/caLDgrhJiESluGUrfKjwgg 

17. January 28, Southern California City News Service - (California) Burbank pharmacy 
loses license after 5 allegedly overdose. The California State Pharmacy Board 
revoked Jay Scott Drugs’ license after the board found that the Burbank pharmacy’s 
employees failed to properly scrutinize prescriptions that contributed to five patients’ 
deaths from overdoses. 

Source: http://northhollvwood.patch.com/ groups/police-and-fire/p/burbank-pharmacy- 
loses-license-after-5-allegedly-overdose 

18. January 28, Bridgewater Township Courier News - (New Jersey) North Brunswick 
man pleads guilty to insurance fraud. A former partner of Source Institute for 
Human Performance, a company that provides coaching services to independent high 
schools in New Jersey, pleaded guilty to defrauding insurance companies of more than 
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$200,000 by falsely claiming the company gave clients physical therapy. The former 
partner along with conspirators from the company developed the scheme to bill health 
insurance covered personal training sessions as physical therapy services, which no one 
received. 

Source: 

http://www.mycentraliersev.com/article/20140128/NJNEWS14/301280Q38/North- 

Brunswick-man-pleads-guilty-insurance-fraud 

19. January 27, KSLA 12 Shreveport - (Louisiana) $20,000 worth of iPads stolen from 
Caddo elementary school. Police are investigating after about $20,000 worth of iPads 
were stolen from Oak Park Elementary School in Shreveport. 

Source: http://www.ksla.com/storv/24558951/20000-worth-of-ipads-stolen-from- 
caddo-elementarv-school?hpt=ju bn2 
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Government Facilities Sector 

20. January 29, Associated Press - (National) Winter storm socks the Deep South with 
snow, ice; students stranded in Alabama schools. Southern U.S. States were hit by a 
severe winter storm January 28 that dropped snow and ice, prompting the closure of 
dozens of schools and the cancellation of more than 3,200 flights nationwide. Students 
in several schools were forced to remain sheltered overnight while traffic was 
gridlocked for hours, causing hundreds of cars to slide off the road or into each other. 
Source: http://abclocal.go.com/ktrk/storv?section=news/national world&id=941 1313 

21. January 28, Associated Press - (Hawaii) Officer shot boy in wrist at Hawaii school: 
Police. A Honolulu police officer shot and injured a teenager January 28 after the 
alleged runaway entered Roosevelt High School and attacked responding officers with 
a knife, injuring one, after school officials called police. The teen was taken to the 
hospital without further incident and classes were dismissed. 

Source: http://news.msn.com/crime-iustice/officer-shot-boy-in-wrist-at-hawaii-school- 
police 

For another story, see item 18 
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Emergency Services Sector 

22. January 29, WSAZ 3 Huntington - (West Virginia) 911 issue fixed in Mason County, 
W.Va. Mason County, West Virginia’s 9-1-1 service was down for more than 2 hours 
January 28 due to an outage. 

Source: http://www.wsaz.com/news/headlines/911-Outage-Reported-in-Mason- 
County-WVa-242505921.html 
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Information Technology Sector 



23. January 29, Help Net Security - (International) VPN bypass attack possible 
also on Android KitKat. Security researchers at Ben Gurion University found 
that a previously-reported VPN bypass vulnerability in Android 4.3 was also 
able to be modified and used on devices running Android 4.4 ‘KitKat.’ 

Source: http://www.net-security.org/secworld.php?id=16277 

24. January 29, Softpedia - (International) Rovio confirms hackers defaced Angry Birds 
website, no user data compromised. Rovio confirmed that hacktivists briefly defaced 
the Web site of the Angry Birds game via DNS hijacking but did not compromise any 
user data. 

Source: http://news.softpedia.com/news/Rovio-Confirms-Hackers-Defaced-Angry- 
Birds-Website-No-User-Data-Compromised-421857.shtml 

25. January 28, Softpedia - (International) Java bot can launch DDoS attacks from 
Windows, Mac and Linux machines. Researchers at Kaspersky identified a malicious 
Java application designed to perform distributed denial of service (DDoS) attacks that 
can run on Windows, Linux, and Mac OS computers dubbed 

HEUR:Backdoor.Java.Agent.a. The malware is believed to have been used to attack a 
bulk email service. 

Source: http://news.softpedia.com/news/Java-Bot-Can-Launch-DDOS-Attacks-from- 
Windows-Mac-and-Linux-Machines-421551.shtml 

26. January 28, Softpedia - (International) Patnote virus used to distribute ZeuS trojan. 
Trend Micro researchers discovered a malware distribution campaign using the Patnote 
virus to spread the ZeuS malware. The virus adds its code to all executable files in a 
system and on removable and network drives, and contains mechanisms to prevent it 
from being analyzed. 

Source: http://news.softpedia.com/news/Patnote-Virus-Used-to-Distribute-ZeuS- 
Trojan-421468.shtml 

For another story, see item 2 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

27. January 29, WWJ 62 Detroit - (Michigan) Residents ‘saved’ from heatless, sewage- 
covered apartment building in Detroit. Fire officials deemed a southwest Detroit 
apartment complex condemned and removed approximately two dozen families from 
the building after inspectors found the structure was without heat and found raw 
sewage in the basement. 

Source: http://detroit.cbslocal.com/2014/01/29/residents-saved-from-heatless-sewage- 
covered-apartment-building-in-detroit/ 

28. January 28, San Gabriel Valley Tribune - (California) Fire causes $750,000 in 
damages to West Covina businesses. Eight businesses in a West Covina strip mall 
sustained a collective $750,000 in smoke or water damage after a fire broke out January 
28. The cause of the fire is under investigation. 

Source: http://www.sgvtribune.com/general-news/20140128/fire-causes-750000-in- 
damages-to-west-covina-businesses 

29. January 28, KXAN 36 Austin - (Texas) Apartment fire causes $1 million in damage, 
leaves 18 homeless. Authorities are investigating a fire that destroyed one building of 
the Landmark at Barton Creek apartment community in Austin January 28, leaving 18 
people displaced and causing $1 million in damages. One person was rescued from a 
balcony by emergency personnel and a second apartment building was evacuated as a 
precaution. 

Source: http://kxan.com/2014/01/28/firefighters-battling-apartment-fire/ 

30. January 28, Associated Press - (North Carolina) Shooting at NC church leaves boy 
critically wounded. Police in North Carolina are searching for a man suspected of 
opening fire on a Word Tabernacle Church playground January 27, leaving four youths 
injured. 

Source: http://news.msn.com/crime-iustice/shooting-at-nc-church-leaves-bov-critically- 
wounded 
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Dams Sector 

31. January 29, WLFI 18 West Lafayette - (Indiana) Floodgate frozen at Norway Dam. 
Officials warned the public to stay off of Lake Shafer after a floodgate at the lake’s 
dam froze January 27 and was unable to close. The partially-open floodgate is causing 
lower water levels, potentially weakening ice on the lake. 

Source: http://wlfi.com/2014/01/28/floodgate-frozen-at-norwav-dam/ 

32. January 28, Lincoln Journal Star - (Nebraska) Lower Platte South NRD spending 
$1.5 million to upgrade Salt Creek Levee. The Lower Platte South Natural Resources 
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District will spend $1.5 million to replace metal drainage tubes that run through the Salt 
Creek Levee that protects downtown Lincoln and nearby areas from flooding. 

Source: http://ioumalstar.com/news/local/lower-Dlatte-south-nrd-spendin 2 -million-to- 
upgrade-salt-creek/article 33e77130-34ff-5975-alb6-6a8b9b8a6a07.html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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